$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d5bce6c-90ea-3951-a197-aa0526142d66.roa File: 7d5bce6c-90ea-3951-a197-aa0526142d66.roa (raw, json) Hash identifier: cf4xPjhIsTkvT+MD5Y+QuEiTVhFo9md/sgyUSzRKcsM= Subject key identifier: 9B:54:D7:59:16:E3:34:A3:F2:9A:22:42:1A:1C:40:3F:3B:81:B4:05 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC70673C70AD7E2EBFEE380 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d5bce6c-90ea-3951-a197-aa0526142d66.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 33363 IP address blocks: 71.44.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:06:73:c7:0a:d7:e2:eb:fe:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=4f1c8e10-a8ec-497e-8dfe-3d3f77ebfa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:10:09:dc:f7:a5:2a:ca:32:b7:28:70:7e: bb:b2:ba:4b:9e:fd:d1:19:10:2e:a8:2c:94:82:7b: c4:a4:a8:ce:b9:d5:29:55:55:dc:c9:62:52:b0:bd: 2f:5a:12:b7:fa:cc:82:a0:dd:bd:f7:a3:4a:8b:0b: dd:34:0c:31:cd:c8:24:ea:df:c3:c4:77:b2:08:51: ae:d7:48:57:39:9e:b1:93:c1:b8:fe:9b:4f:06:ec: f0:18:30:1c:98:bf:95:cd:ec:f3:0f:9a:43:79:70: b9:07:39:db:55:43:c5:f4:78:d0:de:9a:b1:3c:da: 5a:6b:7a:7d:47:d3:9e:4f:b1:88:0a:e1:94:63:a4: 68:7b:11:40:69:30:e9:dd:4a:f9:93:30:c4:88:59: ab:8b:34:9a:fa:dd:66:17:d6:5e:0b:98:59:31:8e: 96:66:2a:21:55:fa:7a:c0:a5:f7:87:32:ae:89:5e: 16:9e:cf:1f:5e:59:8e:af:d6:3b:1c:c5:86:08:ac: 61:32:26:f8:66:92:cb:72:6a:f5:36:7e:10:4f:08: 31:f7:ec:63:79:1a:0b:c6:0c:a7:d6:22:62:c8:b1: 5a:26:26:e4:f8:2c:cd:de:68:2d:52:0a:6d:53:b1: 3a:06:6c:09:55:b4:c9:05:44:c0:9d:18:c8:0b:8b: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:54:D7:59:16:E3:34:A3:F2:9A:22:42:1A:1C:40:3F:3B:81:B4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d5bce6c-90ea-3951-a197-aa0526142d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bb:f0:62:74:b8:41:a0:69:3a:41:7a:a8:f0:fb:2b:12:17: 72:ca:d2:bc:7b:31:1c:f9:a9:86:c3:5a:4b:8d:5a:75:6c:47: cb:c6:96:ab:1b:11:92:af:42:5c:fd:eb:39:10:1a:8e:e0:d1: b6:6f:9b:ee:52:86:6f:96:59:0e:7d:44:b0:30:22:58:2d:14: ae:a1:89:31:f9:e5:ac:ef:d1:9d:a7:ff:c0:6b:2a:31:05:13: b2:c8:72:dd:2e:0b:bc:19:ea:38:67:fa:98:f6:40:7e:b5:0c: 30:1a:75:99:38:7c:43:8c:12:4f:e5:a8:ef:86:aa:93:63:31: 01:d7:29:42:04:b6:e1:b5:b6:b4:4a:3f:33:07:33:86:45:96: 73:ce:44:ad:4c:f5:bd:a6:78:3a:63:e7:06:f9:3d:18:a0:37: ba:91:b9:c5:dd:80:ba:f7:97:e9:77:a3:78:43:e3:99:4c:4f: c0:de:2d:04:4d:69:ab:e3:fc:c2:7b:02:e5:b0:5e:e5:56:f0: 1d:ab:37:7f:f1:98:86:8e:04:cc:41:d5:a1:13:5f:e1:17:da: ec:3f:e6:68:2d:62:b4:3a:a4:62:7a:44:4a:86:98:65:51:b9: 56:41:00:9d:3b:83:f1:29:95:a6:10:9b:24:b5:8f:47:a6:85: 7d:c6:0f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexwZzxwrX4uv+44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NGYxYzhlMTAtYThlYy00OTdlLThkZmUtM2QzZjc3ZWJmYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAQCdz3pSrKMrcocH67srpLnv3RGRAuqCyU gnvEpKjOudUpVVXcyWJSsL0vWhK3+syCoN2996NKiwvdNAwxzcgk6t/DxHeyCFGu 10hXOZ6xk8G4/ptPBuzwGDAcmL+VzezzD5pDeXC5BznbVUPF9HjQ3pqxPNpaa3p9 R9OeT7GICuGUY6RoexFAaTDp3Ur5kzDEiFmrizSa+t1mF9ZeC5hZMY6WZiohVfp6 wKX3hzKuiV4Wns8fXlmOr9Y7HMWGCKxhMib4ZpLLcmr1Nn4QTwgx9+xjeRoLxgyn 1iJiyLFaJibk+CzN3mgtUgptU7E6BmwJVbTJBUTAnRjIC4tfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtU11kW4zSj8poiQhocQD87gbQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvN2Q1YmNlNmMtOTBlYS0z OTUxLWExOTctYWEwNTI2MTQyZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERyzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq78GJ0uEGgaTpBeqjw+ysSF3LK0rx7MRz5qYbDWkuNWnVsR8vGlqsb EZKvQlz96zkQGo7g0bZvm+5Shm+WWQ59RLAwIlgtFK6hiTH55azv0Z2n/8BrKjEF E7LIct0uC7wZ6jhn+pj2QH61DDAadZk4fEOMEk/lqO+GqpNjMQHXKUIEtuG1trRK PzMHM4ZFlnPORK1M9b2meDpj5wb5PRigN7qRucXdgLr3l+l3o3hD45lMT8DeLQRN aavj/MJ7AuWwXuVW8B2rN3/xmIaOBMxB1aETX+EX2uw/5mgtYrQ6pGJ6REqGmGVR uVZBAJ07g/EplaYQmyS1j0emhX3GDz8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:52:00 2026 by rpki-client